An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Sep 24, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Sep 30, 2019 | Aug 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2019 | Aug 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 19, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-source-azureUpgrade kernel-azure-base | Sep 21, 2019 | Aug 19, 2019 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-azureUpgrade linux-image-5.0.0-1018-awsUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-31-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-165-genericUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-165-powerpc64-smp | Sep 3, 2019 | Aug 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub